DeceptiveDevelopment poisons repos after stealing developer credentials
ESET says the group planted code on npm, PyPI, Packagist, Go modules, and extension stores from April to September 2026.
76
Product
VS Code
- Mentions · 7d6
- Mentions · 30d9
- All mentions12
- First seenSep 2, 2026
- Last mentioned17h ago
Timeline
12 articles · newest firstEmbedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
74
Trojanized Claude Code extension on Open VSX installs an SSH backdoor
Version 2.1.313 beacons to 134.209.82.225 and plants an Ed25519 key; Anthropic’s Microsoft Marketplace build is not implicated.
76
Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
Malware planted in 42 GitHub repos targets Claude, Gemini and Cursor
Hooks in .github/init.js run at session start; JFrog links the traps to the testmetest npm campaign.
76
AI agents in a stand-up call
Open-source Agent Standup turns Claude Code sessions into a live multi-agent stand-up at zero token cost.
22
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Compromised tensorlake npm 0.5.144 delivered the Shai-Hulud worm to steal secrets and spread to other packages.
73
Claude Code's new Mods system lets developers rewrite the AI coding tool from the inside
Anthropic launched Mods, unsandboxed plugins that let developers change Claude Code's tools, commands, and interface.
51
Microsoft agentically ports Copilot runtime to Rust for $120K
Microsoft rewrote its GitHub Copilot runtime from TypeScript to Rust using AI agents, converting 430,000 lines for about $120,000 in tokens.
55
One Click in a Malicious VS Code Project Can Give Attackers Persistent Access to Your PC
Remedio researchers show crafted command: links in VS Code source editors can bypass Workspace Trust to install malicious extensions for persistent access.
55
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware
Kaspersky reports Iran-linked Mirage Kitten delivers new NodeRabbit and PollCat malware to fintech and aviation targets via fake LinkedIn coding assessments.
74
Related CVEs
by mentions- CVE-2026-4194099%9.3Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
Appears with
- Anthropicvendor · 7
- Microsoftvendor · 6
- GitHubvendor · 6
- Cursorproduct · 5
- OpenAIvendor · 4
- Claude Codeproduct · 4
- GitHub Copilotproduct · 4
- Claudeai model · 4
- Forever Securityorganization · 3
- npmproduct · 3
- Noma Securityorganization · 2
- Codexproduct · 2
- Cursorvendor · 2
- Microsoftorganization · 2
- Claude Desktopproduct · 2
- Discordproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.